CVE-2026-28269

MEDIUM

5.9

Descricao

Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to redirect command output to arbitrary file locations. This could be exploited to overwrite critical system files and gain elevated access. Version 9.2.0 contains a patch.

Detalhes CVE

Pontuacao CVSS v3.15.9

SeveridadeMEDIUM

Vetor CVSSCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Vetor de ataqueNETWORK

ComplexidadeHIGH

Privilegios necessariosHIGH

Interacao do usuarioNONE

Publicado2/26/2026

Ultima modificacao3/3/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

accellion:kiteworks

Fraquezas (CWE)

CWE-78

Referencias

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-6j64-6fpp-9453(security-advisories@github.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.